[QPIDJMS-361] request mutual auth for GSSAPI/Kerberos SASL

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.29.0
• Fix Version/s: 0.30.0
• Component/s: qpid-jms-client
• Assignee: Robbie Gemmell
• Reporter: Robbie Gemmell
• Created: 24/Jan/18 17:14
• Updated: 26/Mar/18 10:15
• Resolved: 24/Jan/18 17:43

Description

The JMS client does not currently request mutual-auth when authenticating via GSSAPI/Kerberos, since this is not performed by default by the JVMs SaslServer impl. The cyrus-sasl usage of proton-c and qpid-cpp clients for GSSAPI does result in mutual-auth, where it seems it is performed by default by Cyrus. The JMS client should be updated to match, making their behaviour consistent.